Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: F9K8A73hD/54Q/O0PMJL/ZvxhWxTd4xLWd7vZNAqIVA=
Subject key identifier: 1A:3D:EA:E3:D9:6F:17:03:54:FC:B1:B8:39:BA:9A:70:B1:08:2F:EE
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 01976DAB99B32B2FA517CE4A8CEDEF1369B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 10BC
Signing time: Sat 14 Jun 2025 09:00:51 +0000
Manifest this update: Sat 14 Jun 2025 09:00:51 +0000
Manifest next update: Sun 15 Jun 2025 09:00:51 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: JQfFbxBtO91q4siWv5HfMxxnFdn17XpDzKu/WHXST68=)
2: hFyZQJl9hpSR8MJm5zkkVJyeSKs.roa (hash: dBm/3kMdhPMhsMOkCigtCWUETZQaJ96SgQ6JbE9wZAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:99:b3:2b:2f:a5:17:ce:4a:8c:ed:ef:13:69:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Jun 14 09:00:51 2025 GMT
Not After : Jun 15 09:00:51 2025 GMT
Subject: CN=1a3deae3d96f170354fcb1b839ba9a70b1082fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:01:54:58:88:c9:ff:54:cf:68:be:57:88:
bb:ab:89:b6:ea:42:2d:67:ff:7c:7e:b6:38:d9:10:
b4:94:bd:b1:92:8d:69:8e:31:69:8d:3f:13:99:a3:
9a:8a:a5:d6:54:48:ad:40:c9:db:d0:65:cb:46:60:
c4:c2:2c:6c:38:0d:28:ab:e6:09:56:a1:e6:52:63:
a3:d1:ef:2d:e9:c6:c2:62:9d:a6:f5:02:05:5b:ad:
9c:09:2a:97:f6:93:76:24:33:44:66:60:15:b0:74:
2e:c0:57:6f:cf:53:60:c7:b4:e8:46:b8:0d:c5:2f:
05:86:5d:0b:e2:08:5d:ce:1f:13:6c:d1:50:2b:7a:
45:60:a5:57:e4:56:7f:c5:49:bd:5d:9f:fd:1a:9c:
71:65:55:6d:5d:25:72:4a:10:da:f1:52:8c:82:4b:
0f:2d:6d:b0:c9:a4:ce:c9:67:af:cd:f6:9b:cb:0b:
60:4a:39:33:04:59:cb:fb:ae:12:ac:23:97:27:12:
f1:0f:82:6c:16:8b:c5:d3:c7:4a:23:b8:8c:6f:66:
c0:83:db:f4:a3:a1:94:82:fb:0e:91:26:62:78:21:
c6:23:dd:dc:c0:fe:ff:7c:71:77:6f:68:8f:40:28:
fc:f6:31:5b:be:ab:5b:98:af:6a:70:5e:75:b9:b2:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3D:EA:E3:D9:6F:17:03:54:FC:B1:B8:39:BA:9A:70:B1:08:2F:EE
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:44:39:65:1d:d4:94:e5:86:45:7f:67:66:68:67:47:f6:94:
c6:04:69:32:52:ca:c2:27:1d:c6:11:d5:5a:89:2e:ce:71:2b:
3e:0e:2e:e8:26:a7:05:2e:63:1b:b9:11:fe:66:0d:6e:63:9c:
0b:a1:da:b4:ee:00:a0:9b:d0:2d:84:58:90:01:90:77:fc:cd:
0e:12:e9:99:b6:17:a6:76:f5:54:6a:54:3b:4a:40:db:50:2d:
05:70:bb:83:2f:a1:1c:6d:54:13:15:6c:b8:59:46:8f:af:f7:
e9:d8:0c:68:99:8a:98:45:7a:75:9e:8c:91:77:94:28:9f:42:
19:d2:ff:00:58:37:4b:eb:7a:6e:6f:32:30:6d:2e:57:b9:47:
a8:e1:07:1b:7c:a4:71:12:c9:5d:12:2a:2a:3c:90:d1:20:0b:
b2:fc:af:f2:87:46:01:31:cc:97:e0:cc:4f:48:c0:6c:35:35:
21:69:bf:5f:52:5c:d4:7a:38:72:60:9c:e2:5c:79:89:7f:68:
01:1b:4d:69:5e:bf:d7:e4:f1:d9:cf:b5:6f:8d:8b:25:4b:e2:
2c:98:05:6d:8c:6b:8f:ee:2d:49:46:94:9f:7c:5c:95:e6:d8:
79:b5:42:25:7a:8d:e9:d6:a0:f8:84:13:bc:dd:3a:d5:fc:81:
51:f1:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:40:35 2025 by rpki-client